•Industroyer, also known as CrashOverride, was a highly targeted attack that hit a single, 200-megawatt Ukrainian transmission substation in late December 2016, however the attack vector remains unknown

•Why this attack is a major turning point for cyber security in ICS systems